CVE-2021-3252

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.

• CWE-522

• https://tiger-team-1337.blogspot.com/2021/01/kaco-xp100u-hmi-credential-leak.htmlExploit, Technical Description, Third Party Advisory
• https://twitter.com/Kevin2600/status/1351189347501023238Third Party Advisory
• https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-224-01Third Party Advisory, US Government Resource
• https://tiger-team-1337.blogspot.com/2021/01/kaco-xp100u-hmi-credential-leak.htmlExploit, Technical Description, Third Party Advisory
• https://twitter.com/Kevin2600/status/1351189347501023238Third Party Advisory
• https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-224-01Third Party Advisory, US Government Resource

Published

Feb 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32514Improper access control vulnerability in FirmwareUpgrade in …7.5
• CVE-2021-32515Directory listing vulnerability in share_link in QSAN Storag…5.3
• CVE-2021-32516Path traversal vulnerability in share_link in QSAN Storage M…7.5
• CVE-2021-32517Improper access control vulnerability in share_link in QSAN …7.5
• CVE-2021-32518A vulnerability in share_link in QSAN Storage Manager allows…7.5
• CVE-2021-32519Use of password hash with insufficient computational effort …7.5
• CVE-2021-32520Use of hard-coded cryptographic key vulnerability in QSAN St…9.8
• CVE-2021-32521Use of MAC address as an authenticated password in QSAN Stor…9.8
• CVE-2021-32522Improper restriction of excessive authentication attempts vu…9.8
• CVE-2021-32523Improper authorization vulnerability in QSAN Storage Manager…7.2
• CVE-2021-32524Command injection vulnerability in QSAN Storage Manager allo…7.2
• CVE-2021-32525The same hard-coded password in QSAN Storage Manager's in th…7.2